Arbitrary File Upload

🗓️ 14 Jul 2022 06:19:15Reported by Veracode Vulnerability DatabaseType

strapi vulnerability arbitrary file upload content-api.j

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-32114	14 Jul 202200:37	–	circl
CNNVD	Strapi 代码问题漏洞	13 Jul 202200:00	–	cnnvd
CVE	CVE-2022-32114	13 Jul 202200:00	–	cve
Cvelist	CVE-2022-32114	13 Jul 202200:00	–	cvelist
Github Security Blog	Strapi 4.1.12 Cross-site Scripting via crafted file	14 Jul 202200:00	–	github
NVD	CVE-2022-32114	13 Jul 202221:15	–	nvd
OSV	GHSA-4VM8-J95F-J6V5 Strapi 4.1.12 Cross-site Scripting via crafted file	14 Jul 202200:00	–	osv
Prion	Unrestricted file upload	13 Jul 202221:15	–	prion
Positive Technologies	PT-2022-21097 · Strapi · Strapi	13 Jul 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-32114	23 May 202500:45	–	redhatcve

Vulners

Node

strapi @strapi/strapiRange4.0.0-next.10–4.2.0-beta.4js

strapi @strapi/strapiRange4.0.0-beta.0–4.0.0-beta.22js

Source	Link
github	www.github.com/strapi/strapi/commit/aeb21ff85e23fc29aae03374b6ab5ad4590f01bd
github	www.github.com/strapi/strapi/pull/13105
github	www.github.com/advisories/GHSA-4vm8-j95f-j6v5
docs	www.docs.strapi.io/dev-docs/configurations/public-assets
docs	www.docs.strapi.io/user-docs/users-roles-permissions/configuring-administrator-roles
github	www.github.com/bypazs/strapi
github	www.github.com/strapi/strapi/blob/d9277d616b4478a3839e79e47330a4aaf167a2f1/packages/core/content-type-builder/admin/src/components/AllowedTypesSelect/index.js
github	www.github.com/strapi/strapi/blob/d9277d616b4478a3839e79e47330a4aaf167a2f1/packages/core/upload/admin/src/components/MediaLibraryInput/index.js
grimthereaperteam	www.grimthereaperteam.medium.com/strapi-v4-1-12-unrestricted-file-upload-b993bfd07e4e

03 Aug 2024 10:23Current

8.8High risk

Vulners AI Score8.8

CVSS 26.5

CVSS 3.18.8

EPSS0.02831